Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6efe26d-47f5-37be-b033-579ad5325361.roa
File:                     c6efe26d-47f5-37be-b033-579ad5325361.roa (raw, json)
Hash identifier:          mGYIf2+PRmmhf/NPeFuX4lg2crWA4P9hefBL6IsmB4g=
Subject key identifier:   24:D1:28:DA:F7:77:BC:6E:C2:AA:F4:D8:B7:16:F4:C2:66:46:20:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1F90526C0979192E13E63680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6efe26d-47f5-37be-b033-579ad5325361.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     396588
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:52:6c:09:79:19:2e:13:e6:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=286d98d2-478e-4084-a387-17528aefb8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:ce:d8:ec:fe:4c:dd:39:27:fd:d2:1f:cb:
                    bb:05:ed:75:40:18:d1:f2:c3:af:7a:1e:28:bc:66:
                    2b:36:b1:70:58:7b:b5:58:30:92:4f:47:86:48:08:
                    85:91:14:7b:a6:24:b6:23:fd:98:24:ab:e3:8e:9c:
                    61:22:e9:07:6c:51:f3:1a:1f:7c:e5:2f:32:2b:c6:
                    00:69:1c:47:24:32:da:7c:c0:61:4f:a4:c4:60:60:
                    34:77:32:5c:74:17:7e:25:31:99:9e:5d:94:94:b2:
                    07:dc:bf:f6:b8:03:cb:f4:9e:cf:e5:df:c9:36:a8:
                    1f:b9:b3:d2:61:e4:5c:d6:44:3b:47:72:af:fe:cf:
                    6b:a8:2c:42:f6:c2:d8:18:c7:09:2a:00:d8:48:7e:
                    ec:5d:9a:58:25:17:93:7d:77:1f:12:94:0b:95:d2:
                    28:62:81:a2:80:3c:e4:50:ac:bb:9b:56:fb:b4:47:
                    44:7a:fc:bf:79:5b:f4:56:15:1f:e0:08:88:01:34:
                    98:46:5b:c8:c8:ca:98:bd:b4:2d:fd:ca:85:9b:fd:
                    2d:55:85:1d:cd:7a:d8:28:d9:c1:31:4f:0c:63:6f:
                    ed:ed:9f:e7:ad:7e:e0:78:a3:9a:55:17:15:95:d8:
                    b4:67:69:a6:02:c6:f6:91:ec:f6:30:36:8c:89:4c:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:28:DA:F7:77:BC:6E:C2:AA:F4:D8:B7:16:F4:C2:66:46:20:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6efe26d-47f5-37be-b033-579ad5325361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:11:3d:05:9a:54:8f:6b:19:23:75:db:ff:7d:bc:1f:85:
         c5:e8:49:78:76:2e:2b:a9:45:d5:4e:4a:f1:14:63:ab:9a:39:
         5b:72:50:08:0d:4e:84:12:cb:f7:db:d6:ee:07:ed:2b:28:96:
         63:18:db:da:f1:d5:b8:ad:e0:ac:83:63:b3:3d:48:8d:ec:ba:
         5d:18:72:57:99:1b:30:a0:2e:70:d5:81:b7:63:af:8b:16:1e:
         48:97:60:24:0b:39:c5:67:8d:9a:b9:5d:98:ff:e8:32:b8:6d:
         9f:6d:a8:78:2f:55:8f:c7:5d:9e:6d:cc:40:c2:f5:c2:dd:a7:
         42:2f:8e:35:53:84:d6:5e:fe:1f:b0:ba:17:40:f8:fb:d4:00:
         fc:3c:31:de:73:24:c3:1b:7d:ea:5e:20:80:c1:be:37:61:24:
         dc:74:c4:a3:71:c3:4c:64:35:59:85:99:46:0a:32:32:b0:db:
         c1:06:99:08:d5:cf:8f:c6:ef:f6:8e:ca:c9:09:c8:99:b3:55:
         a3:97:4f:2e:31:1e:e3:fd:eb:14:78:4f:19:c6:59:3c:c2:a6:
         6d:a0:cd:8c:b6:8c:c1:3a:68:80:30:be:cd:37:33:72:51:3b:
         fe:cd:f3:50:83:f7:f0:d6:1e:8c:10:32:50:f7:c3:03:1a:d6:
         ce:cd:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:54:43 2025 by rpki-client